Cybersecurity Operations Specialist, SIEM Services

General Dynamics

Confirmed live today High trust

Quick summary

Work type
On-site
Location
St. Louis, MO
Salary
$128,039–$173,229 / yr
Posted
116 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $159k
This role $151k
$103k $205k
below market most similar roles pay here above market

This role pays less than 56% of similar roles. Most pay $123,000–$194,735 — the blue band above. At the midpoint, this role pays about $151k versus about $159k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Cybersecurity Operations Specialist, SIEM Services

The Cybersecurity Operations Specialist -SIEM Services (Evergreen) joins the Cybersecurity Data Analysis Services team to manage and sustain the Security Information Events Management capability. This role involves designing, building, testing, and configuring log aggregation platforms, long-term analytics platforms, and cyber threat intelligence capabilities. You will perform preventative and corrective maintenance to ensure 99.99% system availability, manage vendor updates, and execute emergency maintenance actions. Key responsibilities include onboarding IT resources, ensuring correct audit event routing per Intelligence Community Standards, and developing SIEM playbooks. Required technical skills include ArcSight SIEM, ElasticSearch, Kibana, and Linux (RHEL) administration. You will also perform continuous engineering assessments, manipulate SIEM filters to reduce false positives, and troubleshoot event flow through enterprise audit infrastructure to support mission-critical cybersecurity operations.

What you'll do

  • Design, build, test, and maintain the Security Information Events Management (SIEM) capability and log aggregation platforms.
  • Perform preventative and corrective maintenance to ensure 99.99% system availability and reliability.
  • Detect and ticket degradations of SIEM data flows within 60 minutes of occurrence.
  • Execute scheduled maintenance, including patching, updates, and documentation updates according to change management processes.
  • Develop and implement engineering actions for major vendor revisions and continuous performance assessments.
  • Configure assets and ensure data flows are properly parsed for ingestion into automated reporting systems.
  • Create SIEM playbooks and develop alerting rules based on specific malicious event use cases.
  • Tune and aggregate queries and filters to reduce false positives and improve threat analysis.

What we're looking for

  • Must be a US Citizen.
  • Must currently possess an active Top Secret/SCI clearance.
  • Must be able to obtain a Top Secret SCI + Polygraph clearance.
  • Must have 6+ years of related experience.
  • Must have 6+ years of experience with SIEM and development projects.
  • Must have 6+ years of experience with SIEM support for projects and technical exchange meetings.
  • Must have 6+ years of experience developing and maintaining enterprise audit projects.
  • Active TS/SCI Clearance.

More like this

Similar roles

Cybersecurity Operations Specialist, SIEM Services

General Dynamics

Springfield, VA 116 days ago $128,039–$173,229
ArcSight ElasticSearch Kibana Splunk Linux RHEL SIEM UBA Data Analytics Log Aggregation Cyber Threat Intelligence Event Broker Ticketing Systems Change Management
6+ yrs exp

Defensive Cyber Operations Analyst

Leidos

Washington, DC 77 days ago $87,100–$157,450
Defensive Cyber Operations SIEM Splunk Elastic IDS/IPS Firewalls PCAP MITRE ATT&CK Cyber Kill Chain SOC Data Analysis Security Monitoring CompTIA Security+ CySA+ GSEC SSCP CASP+ CCNP Security CISA GCED GCIH Cloud+ CEH CND GIAC GCIA GIAC GICSP ISC2 SSCP
2+ yrs exp Hybrid

Security Information & Event Management (SIEM) SME

Leidos

Shiloh, IL +1 7 days ago $107,900–$195,050
SIEM Kibana Sentinel MDE Tines Darktrace Splunk Detection-as-Code Linux Windows Unix API Development TCP/IP Netflow Full Packet Capture Malware Analysis Cyber Kill Chain Scripting
8+ yrs exp

Cybersecurity Specialist

Leidos

Beavercreek, OH 162 days ago $107,900–$195,050
Nessus SCAP DISA STIGs JIRA Confluence Agile Vulnerability Management System Design CompTIA Security+ CISSP
8+ yrs exp

Cybersecurity Specialist

Abbott

Remote (Abbott Park, IL) 103 days ago
Cybersecurity NIST ISO 27001 IEC 62304 SDLC Threat Modeling Vulnerability Management Cloud Security Security Configuration Review CISSP CISM CEH Security+ GSEC Hybrid Cloud
5+ yrs exp Remote